2 matches found
CVE-2025-6514
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...
9.6CVSS0.77027EPSS
SaveExploits0References8
CVE-2025-6514: Improper Neutralization of Special Elements used in an OS Command
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorizationendpoint response URL...
9.6CVSS8.3AI score0.77027EPSS
SaveExploits0References1
20